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Abstract 

Reversible logic has attracted much research interest over the last few decades, espe¬ 
cially due to its application in quantum computing. In the construction of reversible 
gates from basic gates, ancilla bits are commonly used to remove restrictions on the 
type of gates that a certain set of basic gates generates. With unlimited ancilla bits, 
many gates (such as Toffoli and Fredkin) become universal reversible gates. However, 
ancilla bits can be expensive to implement, thus making the problem of minimizing 
necessary ancilla bits a practical topic. 

This thesis explores the problem of reversible logic synthesis using a single base 
gate and a few ancilla bits. Two base gates are discussed; a variation of the 3- 
bit Toffoli gate and the original 3-bit Fredkin gate. There are three main results 
associated with these two gates: i) the variated Toffoli gate can generate all n-bit 
reversible gates using 1 ancilla bit, ii) the variated Toffoli can generate all n-bit 
reversible gates that are even permutations using no ancilla bit, iii) the Fredkin gate 
can generate all n-bit conservative reversible gates using 1 ancilla bit. Prior to this 
paper, the best known result for general universality requires three basic gates, and 
the best known result for conservative universality needs 5 ancilla bits. 

The second result is trivially optimal. For the hrst and the third result, we explic¬ 
itly prove their optimality; the variated Toffoli cannot generate all n-bit reversible 
gates without using any extra input lines, and the Fredkin gate cannot generate all 
n-bit conservative reversible gates without using extra input lines. We also explore a 
stronger version of the second converse by introducing a new concept called borrowed 
bits, and prove that the Fredkin gate cannot generate all n-bit conservative reversible 
gates without ancilla bits, even with an unlimited number of borrowed bits. 

Thesis Supervisor; Prof. Scott Aaronson 
Title: Associate Professor 
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Chapter 1 


Introduction 

1.1 Reversible Gates 

1.1.1 Definition and Representation 

In logic circuits, a reversible gate is defined as a gate where no information is lost 
in the process of computing the output from the input. Strictly speaking, an n-bit 
reversible gate takes in n bits of input and returns n bits of output, and when given 
the output, we can unambiguously reconstruct the input from that information. For 
example, the NOT gate, which implements logical negation, is reversible because the 
input can be reconstructed by inverting the output. The AND gate, which implements 
logical conjunction, is not reversible because 4 different inputs produce only 2 different 
outputs; specifically the output 0 has 3 different inputs mapped to it. 

There are many ways to represent reversible gates. In this paper, we use mainly 
the following two forms of representation; permutation and sum of products. 

Permutation: We consider all the possible inputs to an n-bit reversible gate as 
a set of binary strings. This set = (0,1}” contains 2” elements. Since the output 
of an n-bit reversible gate also consist of n bits, the set of all possible outputs is also 
In. 
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In order to allow for unambiguously reconstructing the input, the inputs must be 
mapped to the outputs one-on-one. In other words, an n-bit reversible gate can be 
represented as a permutation of the set In- As a result, there are (2"')! n-bit reversible 
gates. 

Permutations have all kinds of properties that may be useful for classifying dif¬ 
ferent reversible gates. In particular, we will be using the parity and the cycle repre¬ 
sentation of permutations in this paper to prove several results about reversible gate 
constructions. 

Sum of Products: A gate (not necessarily reversible) can be represented as an 
arithmetic expression on the field of F 2 . An AND gate can be represented as a ■ 6 
where a and b are the two input bits. A XOR gate can be represented as a + b. A 
NOT gate is a -|- 1, where a is the input bit. Because any gate can be constructed by 
cascading a certain number of AND and XOR gates in some order, we can translate 
the cascading sequence into an arithmetic expression. After expanding it, we will get 
a representation of the gate in the form of a sum of products. 

Since all the operations happen on F 2 , certain properties hold true apart from 
associativity and commutativity laws for regular addition and multiplication. 

Lemma 1. In the gate representation using the sum of products, the following hold 
true: 

(1) a-|-a = 0 

(2) if a ^ b, ab = 0 

(3) a ■ a = a 

The representation using the sum of products is useful when we want a compact 
way of expressing the reversible gate output. It usually takes a more concise form 
than a complete truth table. 
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Apart from the two forms we just introduced, other common ones exist such as 
circuit representations, but for complicated gates they are much more difficult to 
analyze. 

1.1.2 Background 

Reversible logic provides a large potential in energy-efficient computers. Landauer’s 
Principle |S] provides a lower bound on the energy loss for each bit of information that 
is erased during computation. Since no information is erased in reversible computing, 
devices built using purely reversible circuits can potentially achieve energy efficiency 
greater than that bounded using Landauer’s Principle. Such observation motivated 
research in reversible computing. Furthermore, recent decades have seen the flour¬ 
ishing of quantum computing, which attracted more research interest in reversible 
computing since reversible circuits serve as important components in many quantum 
algorithms. 

Among the most extensively studied problems in reversible computing, one of the 
most fundamental is the question of universality. In other words, we are interested 
in whether all reversible gates can be constructed using certain basic reversible gates. 
We formally define universality as follows. 

Definition 1. Denote the universe of all reversible gates byU. Let S be a small subset 
oflA. For each gate g in U, we aim to represent it as a cascade of a sequence of gates 
{gi,g 2 ^ ■■■iQk), where each gi is a gate in S. If we are able to find such representations 
for all gates in U, then we call the subset S universal. 

Just like NAND and NOR in the set of general gates, we are also interested in 
finding a small single reversible gate that is universal in U. However, we can prove 
that no single reversible gate with a constant number of input bits can be universal 
without additional conditions. (See Appendix A) One way to make a non-universal 
gate universal, however, is to provide extra input lines called ancilla bits. 
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1.2 Ancilla Bits 


An ancilla bit provides extra computational power to a gate by serving as an extra 
input line with a fixed input. For example, a 3-bit gate could request an ancilla bit 
with input 1, allowing itself to operate on 4 input bits in total. The ancilla bit can 
have its value changed in intermediate steps, but to maintain the reversibility of the 
gate, the ancilla bit has to be returned to its original value (1 in this example) as 
part of the output. An ancilla bit that is not guaranteed to be reset to its original 
value is said to produce a garbage output bit. 

Definition 2. Let g be a k-bit reversible gate in U, where k is a constant. Let Un 
denote the set of all n-bit reversible gates. For each gate gn in Un, we aim to find 
a cascade of g operating on different input lines. In addition, we are allowed to use 
b ancilla bits with constant values (ci, C 2 ,..., Cb) where Ci G {0,1}. The cascade of g 
should be eguivalent to pn disregarding the ancilla output lines. In other words, if Pn 
maps input {ii,i 2 , ■■■fin) to output (oi, 02 ,..., On), then the cascade of g plus b ancilla 
bits should map input (A, A, ■■■fin, Ci, C 2 , ■■■, cfi to output (oi, 02 ,..., On, Ci, C 2 ,..., Cfe). If 
such a cascade can be found for any gate in Un, we call the gate g n-bit universal with 
b ancilla bits. 

Many 3-bit reversible gates are n-bit universal given sufficient ancilla bits, allowing 
for garbage output bits. Two common examples are the Toffoli gate and the Fredkin 
gate. 

1.3 Toffoli Gate 

The Toffoli gate, or the Controlled-Controlled-Not (C'^NOT) gate, was first invented 
by Toffoli |12( . It is n-bit universal given unlimited ancilla bits. Given three input 
bits (a, b, c), the Toffoli gate inverts c if and only if both a and b are 1, and it keeps 
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a and b unchanged. Figure 1-1 shows the circuit and the truth table representations 
of the Toffoli gate. 
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Figure 1-1; Circuit and truth table representations of the Toffoli gate. 

In the circuit representation, the top two lines are called the control lines, and the bottom 

line is called the target line. 


We can also represent Toffoli gate using the sum of product representation men¬ 
tioned in Section 1.1.1. obis equal to 1 if and only if both a and b are 1, so the Toffoli 
gate will return output (a, b, ab + c). 

By adding more control lines to the Toffoli gate, we get multi-control Toffoli 
gates. A multi-control Toffoli gate with k control lines {Cf^NOT ) takes in input 
(oi, 02 ,..., Ofc, b), keeps the hrst k bits unchanged, and inverts the last bit b if and only 
if all the hrst k bits are 1. Using the same sum of products representation, Cf^NOT 
produces output (oi, 02 , ...,ak,b + IliLi ®*)- 


1.4 Fredkin Gate and Conservative Gates 


Another common gate that is n-bit universal with sufficient ancilla bits is the Fredkin 
gate, also know as CSWAP , invented by Fredkin jl]. Given three input bits {a,b,c), 
the Fredkin gate swaps b and c if and only if a is 1. It keeps a unchanged. Figure 1-2| 
shows the circuit and the truth table representations of the Fredkin gate. 
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Figure 1-2; Circuit and truth table representations of the Fredkin gate. 

In the circuit representation, the top line is called the control line, and the bottom two 

lines are called the target lines. 

We can also represent the Fredkin gate using the sum of products representation. 
Input (a, b, c) corresponds to output (a, (1 — a)b + ac, (1 — a)c + ab), which simplifies 
to (a, b + ab + ac, c + ab + ac). 

By adding more control lines to the Fredkin gate, we get multi-control Fredkin 
gates. A multi-control Fredkin gate with k control lines {C^SWAP ) takes in input 
(oi, 02 ,..., ak, b, c), keeps the first k bits unchanged, and swaps the last 2 bits b and c 
if and only if all the hrst k bits are 1. Using the same sum of products representation, 
Cf^SWAP produces output (oi, 02 ,..., a^,, 6(1 — HiLi + - nti «*) + 

6nl=i«0- 

An interesting property of the Fredkin gate is that it performs a conditional swap 
on the input bits, thus not changing the Hamming weight of the input string. We call 
this type of gate conservative. Conservative gates have the following property which 
is trivial to prove: 

Lemma 2. If a gate g can be constructed as the cascade of a sequence of conservative 
gates, then gate g must also be conservative. 

This lemma indicates that any gate constructed by cascading Fredkin gates and 
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multi-control Fredkin gates must also be conservative. When using ancilla bits we 
need to return them to their original values, so even with unlimited ancilla bits, 
we are still unable to construct non-conservative gates using Fredkin gates without 
producing any garbage output. 

Another question to ask about Fredkin gates is whether they are universal within 
the set of conservative gates, i.e. whether any n-bit conservative gate can be con¬ 
structed using Fredkin gates with sufficient ancilla bits. This problem has practical 
applications in conservative logic synthesis and other topics. The answer is that Fred¬ 
kin gate is u-bit universal in the subset of conservative gates using sufficient ancilla 
bits, without producing garbage output. |1| 

1.5 Problem Statement and Related Work 

Ancilla bits help remove certain constraints on the type of gates that a base gate can 
generate. For example, cascading Toffoli gates cannot generate any n-bit gate that 
maps the all-zero input to a non-all-zero output, but it can do so by using ancilla bits 
with values set to 1. 

However, ancilla bits have high implementation cost, thus making minimizing the 
necessary number of ancilla bits a practical problem. This thesis explores two main 
questions in this category: What is the minimum number of ancilla bits needed in 
order for a small reversible gate to be n-bit universal? What is the minimum number 
of ancilla bits needed for a small conservative reversible gate to be n-bit universal in 
the set of all conservative reversible gates? 

The topic of reversible logic synthesis has been attracting research interest for 
decades. Due to the difference in their applications, various synthesis methods were 
proposed using different optimization metrics and base gate constraints. Toffoli na 
hrst proved that the Toffoli gate is universal, using a recursive construction on the 
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multi-control Toffoli gates. However, this method is not optimized. The paper also 
proved that, when using only the Toffoli gate as the base gate, a minimum number 
of 2 ancilla bits are needed just to generate the NOT gate. Shende et ah m later 
provided a construction for any even permutation reversible gate using no ancilla bit, 
with the NCT library {NOT, CNOT, Toffoli) as the set of base gates. However, this 
result uses three gates for construction instead of one. Aaronson et ah [T] proposed 
a new construction for any reversible gate using only the Toffoli gate with 3 ancilla 
bits, and a construction for any conservative reversible gate using the Fredkin gate 
and 5 ancilla bits. 

Apart from minimizing the number of ancilla bits, two other commonly used 
metrics are gate complexity and circuit depth im. Various synthesis methods have 
been proposed in order to minimize gate complexity PEI EE]. These methods 
usually use multiple base gates as the generating set, for example, the NCT library, 
and sometimes the NCTSFP library (NCT plus SWAP, Fredkin, and Peres [S]). Also, 
the number of ancilla bits is not minimized in these synthesis methods. 


1.6 Organization 

This thesis focuses on minimizing the number of ancilla bits needed by any single base 
gate. Chapter 2 introduces a construction of any reversible gate using a variation of 
the Toffoli gate with 1 ancilla bit. Compared to the construction by Shende et ah, 
this construction needs only a single gate as the base gate. We also define a new 
concept called the borrowed bit, which is a weaker version of the ancilla bit, and 
argue that 1 borrowed bit is enough for the above construction. Chapter 3 introduces 
a construction of any even permutation reversible gate using the variation of the 
Toffoli gate with no extra input line at all. Chapter 4 introduces a construction 
of any conservative reversible gate using the Fredkin gate with 1 ancilla bit. This 
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improves the currently best known result [T] by 4 ancilla bits. We also prove that, in 
terms of ancilla bits needed, 1 ancilla bit is the best we can achieve, and there exists 
no construction using only borrowed bits. Chapter 5 concludes the results and poses 
questions that remain to be solved on this topic. 
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Chapter 2 


General Universality With One 
Borrowed Bit 


2.1 Toffoli Gate and Universality 


There are several reasons why the Toffoli gate cannot be universal without ancilla 
bits. First, just like any small gate with a constant number of input bits, Toffoli is 
an even permutation when considered as an n-bit gate that only operates on 3 bits 
and leaves the rest unchanged. (See Appendix A) This means that it cannot generate 
odd permutations. In addition to that, Toffoli maps input (0, 0, 0) to output (0,0, 0), 
so without any ancilla bits, any cascade using only Toffoli gates must also map the 
all-zero input to the all-zero output. 

The first restriction applies to any k-hit gate where k is smaller than n. The 
second restriction, however, is specific to the Toffoli gate. We can easily modify the 
Toffoli gate to remove this restriction. 
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2.2 The Variated Toffoli Gate 


We invent a variation of the Toffoli gate by cascading the Toffoli gate with a NOT 


on the second bit afterwards, and name it the variated Toffoli gate. Figure [2^ shows 
its circuit and truth table representations. We can also represent it using the sum of 
products: It maps input (a, b, c) to output (a, b + l,ab + c). 


Input 

Output 

g 

' 000 

010 

001 

Oil 


000 

r 


oil 

001 

100 

110 


y 101 

111 


110 

101 

111 

Circuit Truth 

100 

Table 


Figure 2-1: The circuit and truth table representations of the variated Toffoli gate. 

From the truth table, it is not hard to see that the variated Toffoli gate is also a 
reversible gate. In addition, it maps the (0, 0, 0) input to (0,1,0). We claim that the 
variated Toffoli gate is n-bit universal with 1 ancilla bit. The construction comes in 
two steps: First we prove that any n-bit reversible gate can be constructed using a set 
of multi-control Toffoli gates. Then we provide a construction for any multi-control 
Toffoli gate using the variated Toffoli gate. 


2.3 Reversible Gate from C^NOT 

We start by constructing any reversible gate using certain multi-control Toffoli gates. 

Claim 1. Let T^ denote the set of gates NOT, CNOT, CCNOT ,..., CNNOT . Given 
any n-bit reversible transformation g, there exists a construction of g by cascading 
gates in Tn- 
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Recall that in the permutation representation of a gate g, we hnd an equivalent 
permutation vr on the input set which consists of all binary inputs of length n. If 
we consider these binary strings as numbers, then equivalently vr is a permutation on 
the set N of numbers — 1}. The following is a well-known result about 

decomposing this permutation into a sequence of basic transformations. 

Lemma 3. Any permutation vr on the set N = {0,1, 2,2”' — 1} ean he decomposed 
into the following two basic transformations: 

(1) ti: swapping 0 and 1 

(2) t 2 : shifting k to {k + 1) mod 2”', Vfc G iV 

This lemma reduces the problem of constructing any reversible gate to construct¬ 
ing the ti and t 2 gates using multi-control Toffoli gates. A proof of this lemma is 
included in Appendix B. 


Lemma 4. The n-bit gates ti and t 2 can be constructed by cascading gates from T„. 


Proof. The gate ti swaps elements 0 and 1, which, in the original binary settings, is 
equivalent to mapping input (0,0,...,0) to (0,0,...,!), mapping input (0,0,...,!) to 
(0, 0,..., 0), and mapping all other inputs to themselves. This is equivalent to inverting 
the last bit if and only if all hrst n — 1 bits are 0, which is exactly the opposite from 
the multi-control Toffoli gate. Thus, ti can be constructed by applying NOT to each 
of the hrst n — 1 bits, followed by a CP'^NOT with the last bit being the target line, 
and hnally NOT again for each of the hrst n — 1 bits in order to return them to their 


original states. Figure 2-2 shows a circuit representation for ti. 

The gate t 2 adds 1 to each element. In the original binary settings, the last bit is 
always inverted. The second to last bit is inverted if and only if there was a carry bit 
from the addition on the last bit. Similarly, the Ah bit is inverted if and only if there 
was a carry bit from the {i -I- l)th bit. 
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Figure 2-2; Circuit representation for ti. 

More specifically, the ith bit is inverted if and only if all the lower bits are 1, where 
i = 1, 2,n — 1. Thus t 2 can be implemented as a cascade of the following gates: 

(1) NOT on the last bit 

(2) CNOT on the last two bits, with the {n — l)th bit as the target line 

(3) C^NOT on the last three bits, with the [n — 2)th bit as the target line 


(n) CN'^NOT on all n bits, with the highest bit as the target line 


Figure 2-3 illustrates the construction on a 5-bit input. 


□ 


Combining the two lemmas above, we can conclude that any n-bit reversible gate 
can be constructed by cascading multi-control Toffoli gates with up to n — 1 control 
lines. 
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Figure 2-3; Circuit representation for t 2 - 

2.4 C^NOT from Variated Toffoli 

In the previous section we constructed reversible gates using ONOT , so what remains 
to do is to construct ONOT from the 3-bit variated Toffoli gate. We hrst examine a 
few cases when i is small. 

2.4.1 Base Cases 

When i is 1, O'NOT becomes CNOT, which can be implemented by applying the 
variated Toffoli twice. We apply the variated Toffoli in the same order as the input, 
with the third bit being the target line and the second bit being the inversion line. 
Suppose the input is (a, b, c), then this will generate the following output; 

(a, b, c) —)■ (a,b-i- 1, ab -h c) (a, b, a{b -|- 1) -|- a6 -|- c) = (a, b,a + c) 

The resulting gate is equivalent to a CNOT on the bits a and c, with c being the 
target line. 

When i is 0, ONOT becomes NOT, which can be implemented using a slightly 
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more complicated procedure: 


1. Apply variated Toffoli on the 1st, 2nd, and 3rd bits. Starting with input (a, b, c), 
this gives us {a,b + l,ab + c). 

2. Apply variated Toffoli on the 2nd, 1st, and 3rd bits. This gives us (a + 1, 6 + 
1, a + c). 

3. Apply variated Toffoli on the 1st, 2nd, and 3rd bits. This gives us (a + 1, 6, a + 
c T (o T 1)(6 T 1)) = (o T 1, 6, oh T ^ T c T 1). 

4. Apply variated Toffoli on the 2nd, 1st, and 3rd bits. This gives us (a, b,ab + b + 
c T 1 T (n T 1)^) ~ (O) &, c T 1). 

The resulting gate is equivalent to a NOT gate on c. 

When i is 2, O'NOT becomes the regular Toffoli gate, which can be implemented 
by a variated Toffoli followed by a NOT on the second bit. 

2.4.2 Borrowed Bits 

Before constructing the general cases, we introduce a new concept called the borrowed 
bit, which is a weaker version of the ancilla bit. The main difference between a 
borrowed bit and an ancilla bit is the specihcation on the input value. 

Definition 3. A borrowed hit is an auxiliary input line provided to a gate sueh that 
it eould be manipulated by the gate, but must be returned with the same value as its 
original state. A borrowed hit eould start as either 0 or 1. The gate that requires a 
borrowed hit does not have the privilege of speeifying its starting value. 

Borrowed bits are strictly less powerful than value-specihed ancilla bits. However, 
their flexibility can make them useful when building reversible gates recursively. For 
example, gate A requires a borrowed bit and changes it to an unknown intermediate 
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stage during the computation. Gate 5, which is a subroutine used as a building block 
for A, needs another borrowed bit. Then B can simply reuse the bit from A, change 
it to anything, and revert it back to the original state before returning it back to A. 
The advantage comes from the fact that gate B does not require the auxiliary bit to 
start with some particular value. 

In practice, borrowed bits are also much cheaper than ancilla bits. Creating value- 
specific input lines such as ancilla bits might induce undesirable energy consumption. 
The borrowed bits, however, can simply be taken from unused memory. This signifi¬ 
cantly lowers the implementation cost. 

2.4.3 General Cases 

Now we examine how to construct (ANOT where i > 2, using induction. In the 
previous section where we construct the reversible gates using (ANOT , no ancilla bit 
is necessary. For the construction of A NOT , we aim at using only one ancilla bit. 
An ancilla bit is an auxiliary input line, so with the extra input bit, an {i + l)-bit 
A NOT can be expressed as an {i + 2)-bit gate, where the first {i + 1) bits are used 
to perform A NOT , and the last bit remains unchanged. 

The core idea of this construction is as follows; Assume we know a construction 
with at most one ancilla bit for gate A'^NOT , then we have a method of constructing 
ANOT from the A'^NOT gate using an additional ancilla bit. However, this alone 
does not guarantee that the total number of ancilla bits needed for ANOT is 1. 
The reason is that, the A'^NOT gate is used within ANOT as a subroutine; the 
ancilla bit required by A~^NOT requires a fixed input of 0 or 1, thus it cannot use 
the same ancilla bit as the one for the construction of ANOT , which is currently in 
an intermediate stage with an unknown value. 

However, this issue can be resolved using the idea of borrowed bits. Assume that 
we have a construction for A'^NOT using one borrowed bit, then we claim that we 
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can construct O'NOT using another borrowed bit. Since borrowed bits can be reused 
in subroutines, the total number of borrowed bits used to construct ONOT would 
merely be 1. The construction of ONOT (an {i + l)-bit gate) is as follows, assuming 
the input is (oi, 02 ,..., Oj, Oj+i, x) with Oj+i being the target line and x being the 
borrowed bit: 


(1) Apply O~^N0T on the hrst (? — 1) bits and the last bit, with the last bit being 
the target line. This gives us (ai, 02 ,..., a^, aj+i,x + ni=i Denote the new 
value of the last bit {x + m=i by x'. 

(2) Apply CCNOT on bits (a*, x', aj+i), with Oj+i being the target line. This gives 

us (oi, 02 ,..., Oj, aij^i+ai{x+Y\^02i which simplihes to (oi, 02 ,..., Oj, Oj+iT 

O-iX + rTfc=l ^ A D[fc=l ®fc)- 

(3) Apply O'^NOT on the hrst (f — 1) bits and the last bit again to return the bor¬ 
rowed bit to its original value. This gives us (oi, 02 ,..., a,, ai^i+aiX+Y^^^^ a^, x). 
Denote the new value of the target line (oj+i -|- OjX + ni=i tiy O+i- 

(4) Apply CCNOT on bits (oj, x, again, removing the redundant term in a'_,_p 
This gives us (oi, 02 ,..., a*, a^+i + HUi Ofc, x). 


Figure |2-4| illustrates this construction on a 5-bit input, with the last line being 
the borrowed bit. 

The resulting gate is equivalent to applying ONOT on the hrst (i + 1) bits. The 
borrowed bit x participated in the computation, but was returned to its original value 
eventually. A small subtlety is that we used CCNOT, which is the regular Toholi gate. 
Note that Toholi can be constructed from the variated Toholi without any borrowed 
bits as explained in Section 2.4.1. 

By induction, we have constructed O^NOT using only 1 borrowed bit. 
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Figure 2-4: Construction of C"^NOT from C^NOT. 

The last line is the borrowed bit, and the second to last line is the target line. 

2.5 Conclusion 

Combining the two previous sections, we provided a construction of any n-bit re¬ 
versible gate using the variated Toffoli gate plus at most 1 borrowed bit. We also 
saw from previous chapters that a small gate like the variated Toffoli cannot possibly 
generate all n-bit reversible gates using pure cascades with no additional input lines. 
Thus, in terms of minimizing the number of ancilla bits needed for n-reversible gate 
construction, we have found an optimal solution. Compared to the other optimal 
construction method proposed by Shende et ah PH, our construction uses only a 
single base gate. 
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Chapter 3 


Constructing Even Permutations 
without Ancilla Bits 


In the previous chapter we discussed the variated Toffoli gate, which can be used to 
generate any n-bit reversible gate using one borrowed bit. One extra input line is 
optimal for general universality, but for a special subset of reversible gates, we can 
achieve even better results. In this chapter, we explore the set of reversible gates that 
are equivalent to even permutations, and prove that the variated Toffoli can generate 
any such gate using no extra input line. 

Lemma 5 states that any permutation can be broken into one of the two basic 
types of transformations ti and t 2 - To make analysis easier for this chapter, we slightly 
tweak the dehnition of ti without changing the correctness. 

Lemma 5. Any permutation n on the set N = {0,1, 2,..., 2” — 1} can he decomposed 
into the following two basic transformations: 

(1) t\: swapping 2” — 2 and 2” — 1 

(2) t' 2 : shifting k to {k + 1) mod 2”, \/k & N 

Furthermore, if n is an even permutation, then the number of t'l and the number of 


29 



t 2 in the decomposition are both even numbers. 


See Appendix B for the proof of this lemma. 

Given any even reversible gate g, consider the sequence of t[ and ^2 that its cor¬ 
responding permutation is broken down into. Since there are an even number of t'^ 
and t '2 respectively, we can break down the sequence into pairs of adjacent transfor¬ 
mations. Thus we only need to hgure out how to construct gates corresponding to 
each possible pair of transformations using the variated Toffoli gate. 

We build the gates recursively. In the previous chapter we already saw how the 
variated Toffoli gate can generate NOT, CNOT, and CCNOT without any extra input 
lines. We also proved that the set can generate all n-bit reversible gates, so the 
variated Toffoli can generate any 3-bit gate without any extra input lines. We use 
this as our base case. 

Assume that a construction exists for any {i — l)-bit gate that is an even permu¬ 
tation. Now we aim at constructing the f-bit even permutation gates. We consider 
the sequence of t'l and t 2 broken into adjacent pairs; these pairs fall into one of the 
four possible cases: (1) t[ t[ (2) t 2 t '2 (3) t '2 (4) t '2 t'^ . For convenience, we consider 

these combined transformations as matrices and denote them as Mi, M 2 , M 3 , and 
M 4 respectively. 

In the hrst case, the two cancel out, so Mi is the identity matrix. 

In the second case, the combined transformation corresponds to adding 2 to any 
input, which is equivalent to leaving the last bit unchanged and adding 1 to the hrst 
{i — 1) bits. This is an even permutation gate with i — 1 bits, so it is already handled 
based on our assumption. 

The third case and the fourth case are similar. As an example, we show the 
construction for the third case. M 3 consists of followed by t '2 ■ In the previous 
chapter, we saw that t '2 can be broken into a cascade of NOT, CNOT, CCNOT, ... , 
C^'^NOT . The highest bit can be used as a borrowed bit for all but the last C^'^NOT 
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in the sequence, so it remains to be solved how to use the variated Toffoli gate to 
generate t'^ followed by Q'^NOT with no extra input line. This Q'^NOT operates 
on all the bits, with the highest bit being the target line. Notice that , the swap of 
2 * — 2 and 2* — 1, is equivalent to a Q'^NOT on all i bits, with the lowest bit being 
the target line. 

Suppose that the input is (a, Ci, C 2 ,..., Cj_ 2 , &), then the gate corresponding to these 
two O'^NOT cascaded together will change the highest bit a to a + «m=ic.+ 
b ni=^i Cfc, and change the lowest bit 6 to 6 + a ni=^i Cfc- 

In order to construct such a gate using smaller gates, we consider breaking the 
elements (ci, C 2 ,..., Ci- 2 ) into roughly even halves. Denote the hrst half by x and the 
second half by y. Let X be the product of all elements in x and Y be the product of 
all elements in y. We can construct the gate using a sequence of C^NOT ; 


(a,a;,?/,6) 

—)■ (a + x, y, h) 

—)■ (a + bX, x,y,b + aY + bXY) 

{a + aXY + bXY,x,y,b + aY + bXY) 
{a + aXY + bXY,x,y,b + aXY) 


Notice that each of these C^NOT gates has fewer than i control lines, which are 
already handled based on the inductive assumption. This completes the construction 
for any conservative reversible gate given all even permutation gates with up to f — 1 
bits. Thus, the variated Toffoli gate can be used to generate any even permutation 
reversible gate using no extra input lines. 
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Chapter 4 


Conservative Universality Using One 
Ancilla Bit 


Conservative logic gates are a subset of logic gates with practical applications in 
modeling physical systems with quantity conservation. The Fredkin gate is a com¬ 
mon conservative reversible gate. In this chapter we examine a way to construct all 
conservative reversible gates using 3-bit Fredkin gates plus one ancilla bit. 

Fredkin gates are conservative, and thus can only generate conservative transfor¬ 
mations. 

We can divide the set Im = {0,1}™' into m-|-l disjoint subsets S'o, Si^ ..., where 
Si represents the subset of all such strings with Hamming weight i. Si contains 
elements. 

If we consider a conservative reversible gate as a permutation tt on 1^, then 
due to the fact that conservative gates preserve Hamming weights, tt must not map 
an element in subset Si to another element in a different subset Sj. Thus, we can 
decompose tt into permutations within each of the subsets. That is. 


TT — TTq ■ TTi ■ ... ■ TTm 
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where tt* denotes the permutation on 5'*. This representation for conservative re¬ 
versible gates will be used throughout this chapter. 

4.1 From C^SWAP to Conservative Reversible Gates 

We consider breaking down the gate construction into permutations, using C^SWAP 
to construct each tt^, k = 0,1, Basically we aim at constructing any transposi¬ 

tion within Sk using (ASWAP . Sk consists of strings with Hamming weight k. Thus, 
we can use C^'^SWAP as a transposition of any two strings in Sk with a Hamming 
distance of 2. However, C’^'^SWAP also takes effect on strings in Sk+ 2 , Sk+ 2 , ■■■, Sm-i- 
In order to not mess up the permutations on the subsets that have already been 
constructed, we build the permutations starting from subsets with lower Hamming 
weight. 

Now what remains is to construct using C^'^SWAP . It suffices to use C'^'^SWAP 
to construct any transposition that is part of Tik- Take Sm -2 as an example, and 
consider the transposition on two strings Sa,b and Sc,d, where Sij indicates a string 
with locations i and j being 0. Consider an intermediate string Sb^c- Then we have 
the following procedure to swap Sa,b and Sc,d, propagating through the intermediate 
string: 

(1) Apply (T^'^SWAP , using bits other than a, b, c as control lines, and bits a, c as 
the target lines. This swaps Sa,b and Sb,c- 

(2) Apply C^'^SWAP , using bits other than b, c, d as control lines, and bits b, d as 
the target lines. This swaps Sb,c and Sc,d. 

This is based on the assumption that b ^ c. When b = c, the conversion can be 
done using a single C^'^SWAP . 

After these steps, Sa,b becomes Sc,d, while Sc,d is now Sb,c- We need one more step 
to propagate Sc,d back to Sa,b'. 
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(3) Apply SWAP , using bits other than a, b, c as control lines, and bits a, c as 


the target lines. This swaps Sa,b and Sb,c- 


After these steps, we will have swapped Sa,b and Sc,d without changing any other 
input in Sm- 2 - 

In the general case of where we want to construct the transposition of two 
strings Si,S 2 , we can always find a sequence of intermediate strings between si and 
S 2 , such that each pair of adjacent strings have Hamming distance 2. Thus we can 
use C^'^SWAP to swap any pair of adjacent strings. 


The first phase involves shifting si all the way to S 2 - This converts Si to S 2 while 
shifting all other strings in the sequence to the left by 1. The second phase involved 
shifting S 2 all the way back to si. This converts S 2 to si while shifting all other strings 


back to their original locations. Figure 4-1 illustrates the two phases when si and S 2 
are Hamming distance 10 away. 


Si ^1 b2 h h S 2 



bi b 2 ^3 ^4 S2 Si 



S2 ^1 b 2 bs b^ Si 


Figure 4-1: Two phases constructing the transposition between two strings. 
The last line is the borrowed bit, and the second to last line is the target line. 


Thus we have a construction of any conservative reversible gate using C^SWAP . 
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4.2 Constructing C^SWAP 

We consider a recursive implementation of C^SWAP , similar to the process for con¬ 
structing (ANOT. We explore two methods of constructing (ASWAP from SWAP. 
The hrst method uses an ancilla bit, while the second method uses a borrowed pair of 
bits that are opposite. The hnal construction for (ASWAP merges the two methods 
and uses one ancilla bit in total. 

4.2.1 The Ancilla Bit Construction 

This construction requires an ancilla bit with its original value set to 0. Assume the 
input is (oi, 02 ,..., Oj+i, aj+ 2 , a;) with (aj+i,aj+ 2 ) being the target lines and x being 
the ancilla bit, whose initial value is set to 0. We also assume that there exists a con¬ 
struction for (A~^SWAP, disregarding the extra input requirements for this subroutine. 
The construction is as follows: 

(1) Apply CA'^SWAP on the hrst i bits and the last bit x, with a* and x being the 
target lines. After this step, the last bit becomes Oj if all but the last control 
lines are set to 1. It remains 0 otherwise. 

(2) Apply CSWAP on the last three bits, with Oj+i and 0^+2 being the target lines, 
and the last bit being the control line. 

When there is at least one 0 in the set (01,02, ...,Oi_i), the control line will be 
0, and thus the target lines will not be swapped. Otherwise if (01,02, ...,Oj_i) 
are all 1, the control line will now be Oj, and thus the target lines are changed 
if and only if o^ is also 1. This effectively swaps the target lines if and only if 
all control bits are 1. 

(3) Apply C^'^SWAP on the hrst i bits and the last bit again. The ancilla bit is 
reverted to its original value because the hrst i bits were never changed. 
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Notice that this alone does not give us a single-ancilla-bit construction for O'SWAP, 
because the ancilla bit needed during this step cannot be reused in the subroutines. 

4.2.2 The Borrowed Pair Construction 

This construction requires two extra input lines whose original values are set to 0 and 
1. Assume the input is (oi, 02 ,Oj+i, aj+ 2 , x, y) with (aj+i,aj+ 2 ) being the target 
lines and {x,y) being the borrowed pair, where x is set to 0 and y is set to 1. The 
construction is as follows: 

(1) Apply CSWAP on bits (oi, x, y), with x being the control line and (oi, y) being 
the target lines. This changes y to y' = y{l — x) + aix, and changes ai to 
a\ = ai(l — x) + yx, which simplihes to Oi + aix because x and y take opposite 
values. 

(2) Apply O'^SWAP on the hrst i bits and x, with ai and x being the target lines. 
The new value for Oj after this step is; 

2—1 2—1 

a- = ai{l-Y\_ak) + xY\_ak 

k=l k=l 

i 2—1 

= Qi + (oi + aix) Ofc + x{ai + aix) n 

k=2 k=2 

i i 

= ai + Y\_ak + xY\_ak 

k=l k=l 

( 3 ) Apply CSWAP on bits (o', Oj+i, 0 ^+ 2 ), with (aj+i,ai+ 2 ) as the target lines. At 
this point, the swap of (oj+i, aj+ 2 ) depends on the value ai + ni=i nfc=i 

(4) Apply O'^SWAP on the hrst i bits and x once again to revert a' and x' to their 
original values a* and x. 
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(5) Apply CSWAP on bits (oi, x, y) again to revert y' and a\ to their original values 
y and ai. 

(6) - (10) Repeat gates (1) to (5), replacing x with y, and y with x. This initiates 
another swap on the bits (aj+i,aj+ 2 ), controlled by the value Oj + ni=i + 
y nfc=i 

After cascading the gates above, the target lines (ai+i,aj+ 2 ) are conditionally 
swapped twice, using two different control values a* + nL nL df^ and (i{ T 

nLi + ^nLi^fc- This is equivalent to a single conditional swap on the target 
lines with the control bit being the sum of these two values, which is {x + y) HLi 
Because x and y take opposite values, x + y must be 1, so swapping (aj+i,ai+ 2 ) is 
effectively controlled by HLi which includes all the control lines. 

Notice that in the calculation of the hnal control bit value, the only requirement 
on (x, y) is actually the fact that they are opposite. It is not hard to verify that if x 
is set to 1 and y is set to 0, the same argument still holds. This is why we call it a 
borrowed pair; the requirement is still weaker than a pair of ancilla bits. 

4.2.3 Merged construction for C^SWAP 

The hnal construction of (ASWAP makes use of both constructions. The core idea 
of this combination step is based on the following observation; In the borrowed pair 
construction, when the borrowed pair of bits {x, y) share the same initial value, then 
the output will be exactly the same as the input, failing our original intention of 
swapping Oj+i and 0^+2 controlled by HLi However, if we use the target lines as 
the borrowed bits, then when the target lines share the same initial value, whether 
the gate swaps them or not has no effect on the hnal output. 

This observation provides us a way to incorporate both constructions in one. 
When constructing (7SWAP from SWAP, we inevitably need to pick one of the 
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two constructions for 0-'^SWAP. In order to reuse bits to the largest extent, we choose 
the borrowed pair construction, using the two target lines (oj+i, 0 ^+ 2 ) in the (ASWAP 
as the borrowed pair for SWAP. We use this method to construct CCSWAP from 
CSWAP, CCCSWAP from CCSWAP, and so on. In this way, the only extra input 
lines we need from outside are from the last layer when we construct (ASWAP from 
(A'^SWAP, which are a borrowed pair {x,y) whose values are opposite. This gives 
us a construction of (ASWAP using Fredkin gates with 2 ancilla bits. These are 
ancilla bits instead of borrowed bits because their initial values cannot be completely 
arbitrary. 

However, with the ancilla bits construction, we can further reduce the number of 
ancilla bits needed. We use the borrowed pair construction for constructing up to 
(A'^SWAP, using the same target line trick described in the previous paragraph. Then, 
when constructing (ASWAP from CA'^SWAP, we switch to the ancilla bit construction, 
using an ancilla bit with its value set to 0. This gives us a construction of (ASWAP 
using Fredkin gates with only 1 ancilla bit. 

Combined with the fact that any conservative reversible gate can be generated 
using CASWAP without any extra input lines, we now have a way to construct any 
n-bit conservative reversible gate using Fredkin gates and 1 ancilla bit. In the next 
section, we examine if it is possible to do even better. 


4.3 Necessity of Ancilla Bits 

We mentioned in previous chapters that a borrowed bit is weaker than an ancilla bit 
in the sense that it does not guarantee a hxed input. In the previous section, we 
provided a construction of any n-bit conservative reversible gate using the Fredkin 
gate plus 1 ancilla bit. But since borrowed bits are cheaper, is it possible to hnd a 
construction using only borrowed bits? 
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Claim 2. Even with an unlimited number of borrowed bits, we still cannot generate 
all n-bit conservative reversible gates with 3-bit Fredkin gates. 


Proof. Assume we have b borrowed bits. The statement is thus equivalent to the state¬ 
ment that Fredkin gates cannot be used to generate all n-bit conservative reversible 
gates in the (n -|- 6)-bit universe. For convenience, let m denote n b. 

Using the permutation decomposition technique we introduced at the beginning at 
this chapter, we study the parity of the permutation TTj. Take SWAP as an example. 
So and Sm contain only one element each, so SWAP is an even permutation on these 
two subsets. On Si, SWAP is an odd permutation because it swaps two elements and 
keeps everything else unchanged. On Si, without loss of generality we assume that 
SWAP operates on the first i bits. Thus it pairs up two strings that start with 01 and 
10 but all of the remaining m — 2 bits are the same, and performs a transposition on 
those two numbers. 7i2 is equivalent to the product of all such transpositions. Since 
the Hamming weight is i, there must be exactly i — 1 I’s in the remaining n — 2 bits. 
Thus there are a total of ) pairs, corresponding to {^Ii) transpositions. Whether 
SWAP is an even or permutation on Si depends on the parity of this number. 

We define a parity vector for each conservative reversible gate. A parity vector p = 
{po. Pi, ■■■,Pm) represents the permutation parity in each of the m subsets. Specifically, 
Pi is 1 if TTj is an odd permutation, 0 if even. The parity vector for SWAP would then 
be 

, fm — 2\ , fm — 2\ , fm — 2\ , , 

(0,1, f ^ Jmod2, f 2 J mod 2 ,..., mod 2,1,0) 

Similarly, the parity vector for CSWAP would be 


( 0 , 0 , 1 , 




mod 2, 




mod 2,..., 


/m — 3\ 
\m — 4/ 


mod 2,1, 0) 
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The parity vector for C’^SWAP is 




m — 2 — k 
1 


mod 2, 


m — 2 — k 
2 


mod 2, 


m — 2 — k 
m — 3 — k 


mod 2,1,0) 


These parity vectors put together are equivalent to the mod 2 remainder of the 
elements in the Pascal triangle. 

Now we can discuss whether a subset G of the gates SWAP, CSWAP , C'^SWAP 
can generate a gate that is not in set G. It is not hard to see that if gates gi and g 2 
have parity vectors pi and p 2 correspondingly, then the gate generated by cascading 
g 2 after gi would have a parity vector of pi + P 2 - In fact any gate generated by 
cascading any number of gi and g 2 in any order would have a parity vector that is a 
linear combination of pi and p 2 . 

We denote by psi the parity vector of GSWAP . From our analysis above we see 
that Ps 2 starts with three O’s and a 1; it ends with a 1 and 0. Assume that there is a 
way to generate CCSWAP by cascading SWAP and CSWAP, then there exists two 
integers a and b such that 

Ps2 = a ■ pso + b ■ Psi 

The hrst few elements of the right-hand side are 0, a mod 2, [am + b) mod 2,..., while 
the hrst few elements of the left-hand side are 0,0, 0,1,.... Thus we have 


a mod 2 = 0 


and 


{am + b) mod 2 = 0 


These two equations give us a mod 2 = 0 and b mod 2 = 0. That is to say, if there 
exists a way to generate CCSWAP with SWAP and CSWAP , then there must be an 
even number of each. However, this also means that a -pso + b-psi is a 0 vector. This 
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is a contradiction since the fourth element of Ps 2 has to be a 1. 

We have just proven that cascades of SWAP and CSWAP cannot generate CC- 
SWAP, no matter how large m is. In fact, we can easily generalize the result to the 
following; Given all the (ASWAP with i up to A; — 1, we cannot generate CASWAP 
through cascading, no matter how many borrowed bits are provided. 

□ 
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Chapter 5 


Conclusions and Further Work 


There are many ways to evaluate how good a certain gate construction is. The main 
problem we are concerned with in this thesis is the number of ancilla bits used. Other 
metrics include the gate complexity, circuit depth, and others. 

We introduced the concept of borrowed bits, which allows us to consider a weaker 
but also cheaper version of ancilla bits. In terms of the number of extra input lines 
used, we arrived at three optimal constructions. We invented a single gate that can be 
used to generate both any n-bit reversible gate using only one borrowed bit and any 
n-bit even permutation reversible gate using no extra input line. We also designed 
a construction for any n-bit conservative reversible gate using the Fredkin gate with 
only 1 ancilla bit. These results were proved to have reached the minimum number 
of necessary extra input lines. 

In terms of other metrics, these constructions are not optimal. For example, the 
gate complexity (asymptotic number of basic gates used) for generating (7^NOT using 
Toffoli and O(logn) ancilla bits can be polynomial. However, in our construction using 
the variated Toffoli and 1 borrowed bit, we need an exponential gate complexity due 
to the fact that we construct (7NOT from C^'^NOT , rather than construct it using 
a binary recursion. 
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An interesting question to ask is whether there exists a construction using the 
same number of extra input lines, while still achieving polynomial gate complexity 
for (7^NOT] or is it possible that there exists a trade-off relationship between the 
number of ancilla bits used and the best gate complexity that can be achieved? If 
so, then what is the minimum number of ancilla bits required while achieving a low 
enough gate complexity, for example, asymptotically the same as the lower bound 
predicted by Shannon’s counting argument? These questions remain to be answered. 
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Appendix A 


Small Gate Cannot Be Universal 
Without Ancilla Bits 


For completeness, we prove the following statement which has already been proved by 
Toffoli jT2]: No reversible gate with a constant number of input bits can be universal 
without extra input lines. 

Proof. Assume that there exists a fc-bit reversible gate g that is universal without 
extra input lines. We decompose g into transpositions TiT 2 ...Tj. 

Consider an n-bit gate where n > k. Then for an input with n bits, g is equivalent 
to an n-bit gate that operates on k bits and leaves the other n — k bit unchanged. 
Thus, each corresponds to a transposition in this n-bit version of g that has the 
same effect on the k effective bits, but leave the other n — k bits unchanged. Since the 
unchanged n — k bits can have 2”“^ possibilities, the total number of transpositions 
in this n-bit version of g must be a multiple of 2"^“^, which is an even number since 
n > k. Thus g as an n-bit gate is an even permutation. 

Any cascade of even permutations is still an even permutation, meaning that no 
odd n-bit gate can be generated by cascading g. Thus g must not be universal. 

□ 
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Appendix B 


Decomposing Permutation into Basic 
Operations 


We prove the following lemma; Any permutation vr on the set N = {0,1, 2,2” — 1} 
can be decomposed into the following two basic operations: 

(1) ti: swapping 0 and 1 

(2) t 2 '. shifting k to {k + 1) mod 2”, V/c G A 

Proof. Any permutation can be decomposed into a sequence of transpositions. For 
transposition we can further decompose it into adjacent swaps: 

• Swap (f, i + 1). 

• Swap (f, i + 2). 

• ... 

• Swap (f, j). 

• Swap (j,j - 1). 

• Swap (j,j - 2). 
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Swap (j, i + 1). 


Thus it suffices to find a construction for any adjacent swap + using ti and 

h- 


• Apply t 2 for 2” — i times. This shifts everything to the right for 2^ — i times, 
placing (i,i + 1) at (0,1). 

• Apply ti- This swaps (0,1), which corresponds to {i,i + 1) originally. 

• Apply ^2 for * times. This shifts everything back to their original position, 
except that + 1) are now swapped. 


□ 

We can also count the total number of ti and t 2 used in this procedure. For each 
adjacent swap, ti is applied once, and t 2 is applied 2"' times. 

Each transposition is always decomposed into an odd number of adjacent swaps. 
Thus for each transposition, ti is applied an odd number of times, and t 2 is applied 
an even number of times. 

If the permutation is even, then it can be decomposed into an even number of 
transpositions. Thus the total number of ti for this even permutation is even, and so 
is the total number of t 2 - Changing ti to t[ does not change this fact. 
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